Privacy Policy

Cromatica Studio, LLC, a Texas limited liability company operating as Cromática, is responsible for the personal information described in this policy. Cromática is a branding and creative studio offering services worldwide, including in Mexico, the European Union, and the United Kingdom. This Privacy Policy explains how we handle personal information when you visit our website or contact us about projects, press, media, or careers. “We,” “us,” and “our” mean Cromatica Studio, LLC.

For privacy questions or requests, contact info@wearecromatica.com or write to 200 East Grayson St, Suite 210, San Antonio, TX 78215, United States.

Separate agreements or notices may apply to personal information we process while delivering client services or managing employment. This policy does not govern independent third-party websites you visit through our links.

Information you provide. When you email us or submit an inquiry through an enabled contact feature, we receive the information you choose to provide. Our project inquiry fields include first and last name, email, optional phone number and country code, brand name, industry, budget, desired timeline, referral source, and services of interest. Correspondence may include further project information or, for career inquiries, application materials you send us.

Technical information. Serving a webpage involves receiving technical information such as an IP address and browser request details. Hosting and infrastructure providers may retain operational logs, including request times, requested pages, browser or device information, and errors, to deliver and secure the website. These logs are distinct from advertising tracking.

Please provide only information relevant to your inquiry. Do not send passwords, financial account details, government identification numbers, or sensitive personal information through an initial inquiry. If you provide information about someone else, ensure you are authorized to do so.

We use relevant information to respond to inquiries, understand potential projects, prepare proposals, communicate with you, assess career inquiries, and administer our business relationships. We use technical information to deliver the website, diagnose errors, prevent abuse, and maintain security. We may also retain or use information to comply with legal obligations or establish, exercise, or defend legal claims.

Optional marketing. If we introduce marketing communications, we may use your name, email address, and stated interests to send studio news, project updates, and information about our services when you have separately opted in. Submitting an inquiry does not itself subscribe you or make marketing consent a condition of receiving a response. You may decline marketing or withdraw consent at any time through an unsubscribe link or by contacting us. We may retain a minimal suppression record to respect your choice.

Legal bases where EU or UK data-protection law applies. We rely on steps taken at your request before entering a contract, or performance of a contract, where the processing is necessary for that purpose. For business-contact correspondence, website security, and ordinary administration, we may rely on our legitimate interests in responding to business inquiries and operating and protecting our studio, subject to your rights and interests. We rely on legal obligations where applicable, and consent for optional marketing and optional tracking that require it. You may object to processing based on legitimate interests and to direct marketing.

Mexico. Responding to inquiries and arranging requested services are primary purposes. Optional promotional communications are a secondary purpose that you may refuse without affecting your inquiry or requested services.

We limit access to team members and service providers who need information for the purposes described above. We use service providers for website hosting, content delivery, business email, and contact-form delivery. These providers process the information necessary to perform those services, including website request details and, where relevant, inquiry information. Our business-email provider stores the inquiries we receive. If we introduce marketing, analytics, or scheduling services, we will describe their relevant uses of information and provide any required notices and choices before processing begins. Providers must handle information consistently with their role and the applicable contractual and legal requirements.

We may disclose information when required by law, to respond to a lawful request, or where reasonably necessary to protect rights, safety, or security. If our business is reorganized, transferred, or acquired, relevant records may be transferred subject to applicable law and appropriate protections.

We do not currently sell personal information or share it for cross-context behavioral advertising, and our current website does not use inquiry details for targeted advertising. Future advertising tools will require an updated description of their actual data practices and any legally required opt-out controls before activation.

The current website does not use advertising pixels or analytics tracking, and it does not set cookies or store tracking identifiers in your browser. Displaying pages and media still requires your browser and our service providers to process basic request information.

Images and other public website content may be delivered by service providers. Loading that content sends the request information needed to display it to those providers. Information you submit through an inquiry is not published as website content.

We link to third-party websites such as social and portfolio platforms. Following a link takes you to a service with its own privacy practices. Our website does not use a separate response mechanism for legacy “Do Not Track” signals because it does not perform cross-site advertising tracking. We will honor privacy preference signals where applicable law requires them.

If we introduce optional tracking or other materially different processing, we will update this policy and provide any notice or choice required before that processing begins.

Email inquiries. Our current business-email practice has no fixed automatic deletion date, so inquiry correspondence may remain in our inbox indefinitely unless it is deleted following a review or a valid deletion request. This does not override applicable limits on retention or your privacy rights. Where applicable law requires storage limitation, information must be reviewed and deleted or anonymized when it is no longer necessary; merely keeping an email archive is not a reason to retain every inquiry permanently.

The appropriate retention period depends on whether an inquiry remains active, whether it becomes a client relationship, applicable recordkeeping duties, and the need to resolve disputes. Marketing consent and suppression records may be retained as necessary to demonstrate and respect your choices. Provider logs and backups may follow separate retention cycles, which must be assessed against the purpose and applicable law.

We use reasonable administrative and technical measures appropriate to the information we handle, including limiting access to people who need it. No website, email service, or storage system can guarantee absolute security. If you believe information you have shared with us has been compromised, please contact us promptly.

You may contact us to ask what personal information we hold about you, request correction or deletion, or ask us to stop optional communications. Depending on the law that applies to your information, you may also have rights to receive a copy, request portability, restrict processing, object to processing, withdraw consent, or opt out of particular uses. For people in Mexico, applicable rights include access, rectification, cancellation, and opposition (ARCO), as well as revoking consent and limiting use or disclosure. Withdrawal of consent does not affect processing already lawfully carried out.

Email info@wearecromatica.com with the subject Privacy request, describe your request, and provide enough information for us to locate the relevant records. Do not include sensitive identification documents in your initial email. We may need proportionate additional information to verify your identity or an authorized agent’s authority.

We will respond within the period required by applicable law and explain any lawful limitation or refusal. Where applicable, you may appeal a decision by replying with the subject Privacy appeal. You may also raise a complaint with the data-protection authority competent for your location. We will not unlawfully discriminate against you for exercising your privacy rights.

We are based in the United States. Information sent to us may be processed in the United States and other countries where our team or providers operate; their laws may differ from those in your country. Where EU or UK transfer rules apply, a valid transfer mechanism is required, such as an applicable adequacy decision or the relevant standard contractual clauses and any required supplementary safeguards. Contact us for information about the safeguards applicable to your information. You may request information about the applicable processing locations and copies of relevant transfer safeguards by contacting us.

Our website and services are intended for businesses and adults, not children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.

We may update this policy when our website, providers, or practices change. We will publish the revised version here and update its effective date. Where applicable law requires additional notice or consent for a change, we will provide it before applying that change.